diff options
| author | Winter <winter@winter.cafe> | 2022-01-08 15:05:34 -0500 |
|---|---|---|
| committer | Winter <winter@winter.cafe> | 2022-01-08 15:05:34 -0500 |
| commit | b52607f43b11319edb716d65bbecbfdbf2f5b92b (patch) | |
| tree | 29e66e146b373f2f65203bf9451b42e18ad39b81 /nixos/tests/acme.nix | |
| parent | 85a078a25d7d41d805ef5fb3e90af7476d5fefd4 (diff) | |
| download | nixpkgs-b52607f43b11319edb716d65bbecbfdbf2f5b92b.tar nixpkgs-b52607f43b11319edb716d65bbecbfdbf2f5b92b.tar.gz nixpkgs-b52607f43b11319edb716d65bbecbfdbf2f5b92b.tar.bz2 nixpkgs-b52607f43b11319edb716d65bbecbfdbf2f5b92b.tar.lz nixpkgs-b52607f43b11319edb716d65bbecbfdbf2f5b92b.tar.xz nixpkgs-b52607f43b11319edb716d65bbecbfdbf2f5b92b.tar.zst nixpkgs-b52607f43b11319edb716d65bbecbfdbf2f5b92b.zip | |
nixos/acme: ensure web servers using certs can access them
Diffstat (limited to 'nixos/tests/acme.nix')
| -rw-r--r-- | nixos/tests/acme.nix | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/nixos/tests/acme.nix b/nixos/tests/acme.nix index 0dd7743c52b..2dd06a50f40 100644 --- a/nixos/tests/acme.nix +++ b/nixos/tests/acme.nix @@ -54,15 +54,15 @@ import ./make-test-python.nix ({ pkgs, lib, ... }: let baseConfig = { nodes, config, specialConfig ? {} }: lib.mkMerge [ { security.acme = { - defaults = (dnsConfig nodes) // { - inherit group; - }; + defaults = (dnsConfig nodes); # One manual wildcard cert certs."example.test" = { domain = "*.example.test"; }; }; + users.users."${config.services."${server}".user}".extraGroups = ["acme"]; + services."${server}" = { enable = true; virtualHosts = { @@ -252,15 +252,15 @@ in { } // (let baseCaddyConfig = { nodes, config, ... }: { security.acme = { - defaults = (dnsConfig nodes) // { - group = config.services.caddy.group; - }; + defaults = (dnsConfig nodes); # One manual wildcard cert certs."example.test" = { domain = "*.example.test"; }; }; + users.users."${config.services.caddy.user}".extraGroups = ["acme"]; + services.caddy = { enable = true; virtualHosts."a.exmaple.test" = { |